cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
511
Views
0
Helpful
1
Replies

Netflow in ISR4K router - HELP

carl_townshend
Spotlight
Spotlight

Hi All

We have setup netflow on our ISR 4351 router

we don't seem to be receiving flows on our monitoring device

On the router it is saying flow monitor (inactive)

Why would this be?

We have set up using the below commands

flow record PRTG-NETFLOW
description config for PRTG-NETFLOW
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect transport tcp flags
collect interface input
collect interface output
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
flow exporter PRTG-NETFLOW
description Exporter for PRTG-NETFLOW
source GigabitEtherent 0/0/0
destination x.x.x.x
transport udp 2055
export-protocol netflow-v5
template data timeout 60
!
flow monitor PRTG-NETFLOW
exporter PRTG-NETFLOW
record PRTG-NETFLOW
cache timeout active 60
!
interface GigabitEtherent 0/0/0
ip flow monitor PRTG-NETFLOW input
ip flow monitor PRTG-NETFLOW output

1 Reply 1

Hello,

Flexible Netflow exporters use UDP and netflow-v9, try and change that accordingly. Also, I don't think the exporter needs a source interface:

flow record PRTG-NETFLOW
description config for PRTG-NETFLOW
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect transport tcp flags
collect interface input
collect interface output
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
flow exporter PRTG-NETFLOW
description Exporter for PRTG-NETFLOW
no source GigabitEtherent 0/0/0
destination x.x.x.x
transport udp 2055
export-protocol netflow-v9
template data timeout 60
!
flow monitor PRTG-NETFLOW
exporter PRTG-NETFLOW
record PRTG-NETFLOW
cache timeout active 60
!
interface GigabitEtherent 0/0/0
ip flow monitor PRTG-NETFLOW input
ip flow monitor PRTG-NETFLOW output

Check the link below for reference:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-3s/fnf-xe-3s-book/fnf-fnetflow.html